Posts

Showing posts from March, 2019

Creating and renewing your website certificates from Let's Encrypt

Image
OK, *phew*, I've now managed to both create, let my customers run for a 60+ days, and renewed their Let's Encrypt certificates on a number of domains. Time to share my learnings! First off - a big thank you to Let's Encrypt , it's community of users and, finally, to Ryan Bolger for creating and maintaining his Posh-ACME github repository . Using the before mentioned repository, I was able to create a reusable powershell script that issues orders for certificates, stores these certificates in a keyvault that my customer organization owns and, finally, renewing those certificates, updating the contents of the customer's keyvault. Let's get to it! My script starts off with a param declaration, letting you run it either for test or prod: param ([ switch ] $ForProduction ) Discussing the fictional domain name blog.article.com , running the script for test would issue certificates for dev.blog.article.com test.blog.article.com itest.blog.article.co